$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/939334320BC911EC97726684C4F9AE02.roa File: 939334320BC911EC97726684C4F9AE02.roa (raw, json) Hash identifier: HjdHJY4dhNPThfrzk2BhXhVKARb0SnJwW5XgSg5OnAk= Subject key identifier: 8B:A7:F4:29:52:0A:0C:E3:02:A7:5B:A9:75:03:0C:CF:FD:42:29:F3 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6F64 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/939334320BC911EC97726684C4F9AE02.roa Signing time: Wed 10 May 2023 16:38:34 +0000 ROA not before: Wed 10 May 2023 16:38:34 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 142479 IP address blocks: 103.170.162.0/23 maxlen: 24 2407:b3c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28516 (0x6f64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:38:34 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc88a-675a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:43:d5:5d:3d:18:26:ff:57:66:cd:c6:d6: 5e:b8:1a:29:5f:8f:ab:b9:b8:83:d9:4e:b5:0a:2f: 45:ea:43:10:7d:9a:d0:68:4d:d6:4b:82:62:13:f9: f8:03:63:d2:ed:b0:cb:22:21:5d:c4:2a:94:4a:3b: 8e:f4:1f:53:3c:06:e3:a9:88:6f:6e:4b:fe:1e:8b: 5b:cf:f6:5d:05:9d:de:74:0a:c1:13:65:ff:d2:11: a5:44:78:ab:4e:6b:ea:a1:99:f3:f7:8a:63:9b:2c: 7c:67:78:2c:eb:3a:82:78:16:49:27:6f:94:7b:5f: c9:5a:fa:33:9f:46:3e:85:0f:c7:5c:b5:0f:5e:1d: 16:e6:88:22:6f:29:34:83:28:0e:76:53:34:8e:03: 88:e6:30:a4:3e:93:9c:a3:d0:8a:25:67:58:3f:7e: f1:9e:b0:52:91:d7:52:f1:b6:80:86:0f:d7:ff:fe: f2:70:0d:25:60:3d:69:fc:eb:cb:f7:9f:94:44:3d: e4:05:19:11:69:e6:89:7e:4c:55:a6:cb:f4:3e:28: 95:d9:e2:a0:57:b4:f9:a2:7f:0d:5e:03:45:0a:a3: 1f:f8:aa:c2:32:06:bc:0f:c4:90:4b:5d:55:be:fa: 51:21:5b:1d:9f:b0:59:cc:6b:e7:08:83:b3:25:0a: 5e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A7:F4:29:52:0A:0C:E3:02:A7:5B:A9:75:03:0C:CF:FD:42:29:F3 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/939334320BC911EC97726684C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.162.0/23 IPv6: 2407:b3c0::/32 Signature Algorithm: sha256WithRSAEncryption 6a:8f:5e:06:dd:b4:ea:2a:f5:9b:eb:6a:11:0f:a5:3a:4b:76: b0:2d:52:96:ea:0c:7a:de:54:96:f0:3e:a1:28:82:04:34:d1: d4:5b:cb:11:85:81:ba:e4:40:24:97:f3:e6:6b:48:4f:d2:e0: 77:2c:22:55:69:f5:82:99:cc:d7:e3:c9:63:69:f8:1a:89:cf: cc:ed:90:af:42:4f:97:fa:13:a7:fa:6b:7f:c3:95:f4:de:23: b3:ca:6b:87:f6:0c:da:77:35:4d:f1:6d:a0:d5:20:2b:68:b6: cd:12:bf:96:14:3f:10:90:ed:d8:2c:bd:d7:d5:00:5f:f8:c9: 54:22:56:a4:5d:0a:94:08:42:ab:aa:f4:75:76:0a:da:98:c4: 51:04:70:a4:8a:97:8d:46:2a:2d:4d:15:92:10:91:9a:53:dc: b0:79:cf:94:7e:56:41:f2:0e:40:b7:e4:96:51:fb:c6:d4:9e: 18:bb:00:41:32:95:49:40:b5:11:3b:64:80:ac:b7:ad:d7:43: e8:32:fc:ff:d1:4f:fd:c5:79:c3:97:82:82:3c:51:1e:89:c0: 63:1e:ea:5e:c8:cf:57:55:02:58:58:f6:5b:4f:2b:da:d5:1e: a2:d9:ee:ef:f2:79:1c:18:c9:ee:60:61:ce:39:ad:f5:c8:45: 47:72:17:63 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICb2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYzODM0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzg4YS02NzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMND1V09GCb/V2bNxtZeuBopX4+rubiD2U61Ci9F6kMQfZrQaE3WS4JiE/n4 A2PS7bDLIiFdxCqUSjuO9B9TPAbjqYhvbkv+Hotbz/ZdBZ3edArBE2X/0hGlRHir TmvqoZnz94pjmyx8Z3gs6zqCeBZJJ2+Ue1/JWvozn0Y+hQ/HXLUPXh0W5ogibyk0 gygOdlM0jgOI5jCkPpOco9CKJWdYP37xnrBSkddS8baAhg/X//7ycA0lYD1p/OvL 95+URD3kBRkRaeaJfkxVpsv0PiiV2eKgV7T5on8NXgNFCqMf+KrCMga8D8SQS11V vvpRIVsdn7BZzGvnCIOzJQpe1wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIun9ClS CgzjAqdbqXUDDM/9QinzMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTM5MzM0MzIw QkM5MTFFQzk3NzI2Njg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnqqIwDQQCAAIwBwMFACQHs8AwDQYJKoZIhvcNAQELBQAD ggEBAGqPXgbdtOoq9ZvrahEPpTpLdrAtUpbqDHreVJbwPqEoggQ00dRbyxGFgbrk QCSX8+ZrSE/S4HcsIlVp9YKZzNfjyWNp+BqJz8ztkK9CT5f6E6f6a3/DlfTeI7PK a4f2DNp3NU3xbaDVICtots0Sv5YUPxCQ7dgsvdfVAF/4yVQiVqRdCpQIQquq9HV2 CtqYxFEEcKSKl41GKi1NFZIQkZpT3LB5z5R+VkHyDkC35JZR+8bUnhi7AEEylUlA tRE7ZICst63XQ+gy/P/RT/3FecOXgoI8UR6JwGMe6l7Iz1dVAlhY9ltPK9rVHqLZ 7u/yeRwYye5gYc45rfXIRUdyF2M= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org